• Setup EKS connector

  3 min read

  
  

  With the EKS connector you are going to be able to connect any Kubernetes cluster to the AWS EKS console to visualize it's status, configuration, nodes and workloads but not much else. Let's take a look what's needed:

  12/09/2022

  Read more...

• OpenShift: Assign SCC to a SA

  3 min read

  
  

  If you try to create a pod with some privileges using the securityContext you are going to find out that it's not going to work on OpenShift as it would on a vanilla Kubernetes:

  $ kubectl describe sts example-no-scc
  Name:               example-no-scc
  (...)
  
  Events:
    Type     Reason        Age                 From                    Message
    ----     ------        ----                ----                    -------
    Warning  FailedCreate  18s (x13 over 38s)  statefulset-controller  create Pod example-no-scc-0 in StatefulSet example-no-scc failed error: pods "example-no-scc-0" is forbidden: unable to validate against any security context constraint: [provider "anyuid": Forbidden: not usable by user or serviceaccount, spec.initContainers[0].securityContext.capabilities.add: Invalid value: "DAC_OVERRIDE": capability may not be added, spec.containers[0].securityContext.capabilities.add: Invalid value: "DAC_OVERRIDE": capability may not be added, spec.containers[1].securityContext.capabilities.add: Invalid value: "DAC_OVERRIDE": capability may not be added, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or serviceaccount]
  

  08/09/2022

  Read more...

• Kubernetes Secrets: Install External Secrets Operator

  2 min read

  
  

  The Kubernetes External Secrets have evolved into an Operator: External Secrets Operator What does it bring to the table?

  05/09/2022

  Read more...

• OpenShift: The difference between Project and Namespace

  3 min read

  
  

  In OpenShift instead of working with Namespaces it uses Projects, but by creating a Project it going to create a Namespace under the hood. What's the difference?

  $ oc get project
  NAME                                               DISPLAY NAME   STATUS
  (...)
  demo                                                              Active
  $ oc get ns
  NAME                                               STATUS   AGE
  (...)
  demo                                               Active   29d
  

  02/09/2022

  Read more...

• kubectl: Retrieve a list of object names

  2 min read

  
  

  If we need to write some script to retrieve a certain information that kubectl can provide, we can always add the option to remove headers and use something like awk to narrowit down. There's also a better way than doing this:

  kubectl get ns --no-headers | awk '{ print $1 }'
  

  31/08/2022

  Read more...

More recent...

Older content...